PIC your Katz! Say hello to HandleKatz, our position independent Lsass dumper abusing cloned handles, direct system calls and a modified version of minidumpwritedump() brought to you by thefLink #BruCON0x0D github.com/codewhitesec/H…

With some really nice research on implementing PIC for grabbing handles to LSASS from HandleKatz (BruCON ), I've ported the key components to a Cobalt Strike-compatible BOF. github.com/EspressoCake/H… Credits, as always, are included and highlighted below.

Also - postgres is a damn super hero. I'm so thankful I was taught how to write stored procedures so many years ago by a very patient DBA.

Every Angular library author needs to update their project to Angular v13 so we can get off ngcc. Thanks, Me

Just listening to them describing how they wiggle the rocket to control how sunlight falls on #JWST to stop it overheating, in line with their modelling of light propagation through the structure. I have said it before, but I’ll say it again — engineers are amazing.

Sorry for the shade, ARCHIVED - NASA Sun & Space, ARCHIVED - NASA Moon & NASA Earth! But you're just not cool enough 😎 Now fully deployed, our sunshield blocks your heat & light so that our mirrors will be able to detect faint heat signals in the universe: go.nasa.gov/3sXp6ov #UnfoldTheUniverse

Deinstalliert die #LucaApp. Sofort. Und dann umgehend die Corona-Warn-App nutzen👍.

#NASAWebb is fully deployed! 🎉 With the successful deployment & latching of our last mirror wing, that's: 50 major deployments, complete. 178 pins, released. 20+ years of work, realized. Next to #UnfoldTheUniverse: traveling out to our orbital destination of Lagrange point 2!

Here is another implementation of Hellsgate + Halosgate It makes sure, that all resolved syscalls go through ntdll.dll by reusing syscall;ret instructions from clean syscall stubs. github.com/thefLink/Recyc…

the callstack scan was inspired by thefLink's github.com/thefLink/Hunt-… (mentioned in the code: github.com/hasherezade/pe…)

Die Begründung von @ABaerbock für den Widerstand gegen #SWIFTban ist in 24 Stunden von „noch was in der Hinterhand behalten“ über „keine Auslandsüberweisungen für alte Mütterchen treffen“ jetzt bei „deutsche Kohlekraftwerke am Laufen halten“ angekommen. #PutinsWar

Here is my variant of Gargoyle for x64 to evade memory scanners. Fully relies on ROP and PIC without any APC. Huge thanks to waldoirc for the documentation. github.com/thefLink/DeepS…

Our thefLink and Tjark Rasche will give a workshop tomorrow at BSidesBUD 🇭🇺 on creating complex offensive tools as PIC. Come and learn about offensive coding techniques, memory artifacts and benefits of coding tools as PIC.

As part of our #x33fcon talk, invist and thefLink release a socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level 😎 Check it out: github.com/codewhitesec/L…

x33fcon 2022 interviews: thefLink

big middle finger to the universe, but especially to the colleague who made my bones hurt by pointing out that the `z` in `tar -xvzf` hasn’t been needed since version tar 1.15, released in 2004.

Don’t miss this KubeCrash talk: Mercedes-Benz Tech Innovation's Journey to Kubernetes Native Multi-Cluster Management by Sean Schneeweiß. Register today! 🚀 kubecrash.io

It's funny that managers claim that LLMs will replace developers, while it's more likely that LLMs will replace managers.

Oops I did it again 🤭 #TotalSolarEclipse

The provision of a Copernicus EMS satellite mapping upon request for facilitating a search and rescue operation is not an act of political support to any regime or establishment. It is simply an expression of the most basic humanity.